CVE record · 1 source
CVE-2026-111895
CVSS 6.8phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID login flow, which links users by…
- Vendor
- Microsoft
- Product
- Active Directory / Entra ID
- CVSS
- 6.8
- Exposure class
- Identity
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID login flow, which links users by…
phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID login flow, which links users by the mutable preferred_username claim and whose AuthEntraId::create() ignores the…